If helpful, here is a short list I think could help orient people: As an open source project, under the Apache Software Foundation (ASF) there are some clear DO's and DON'Ts.
DO follow the email listserv https://lists.apache.org/list.html?dev@fineract.apache.org (archive) DO follow the Review-Then-Commit (RTC) pattern, DO make sure you are actually fulfilling the checks that are there in the Commit message. DO make efforts to keep the email dev@fineract.apache.org informed of larger chunks of changes you are about to implement. DO make use of the 72 hr "lazy consensus" protocol (if a proposal is minor and there are no objections, you can proceed) -- DON'T hide your design concepts from the listserv by only presenting the Pull Requests. DON'T break functionality without some discussion and agreement on the email listserv. DON'T treat your "Private JIRA" as the end of the effort - the important information must be in Fineract Jira tickets. DON'T reveal security issues on the public email list or on the public JIRA. James